Re: hosts.allow

[Mike Gatton <jorj@flashmail.com>]

>         I understand that much of how it works, but say that I wanted to
>         allow pop3 to all, but still deny all other services to all.
>         I assume that hosts.allow statements are composed of :
>         service:hosts/network
>         thus ALL : 10.254.4. will allow anything on the 10.254.4.0/24
>         subnet access to all network services. I am looking for something
>         more granular that would be something like:
>
>         POP3 : ALL
>         ALL : 192.168.100.
>         ALL : 10.254.9.
>
>         so that I would be able to allow the world pop capabilities, yet
>         restrain access to all other netowrk services to specific
>         networks.
>
>         Any ideas?
>         Charles
>
>

I'm as far from being an expert as it gets, but looking at the man pages on
hosts.allow, it would appear that the above example would work if you changed
the POP3:ALL to the name of the service as specified in /etc/inetd.conf I
believe that the following should allow POP service to the world, yet deny
everything else to the world...

/etc/hosts.allow
    ipop3d:ALL
    ALL: .mydomain.com

/etc/hosts.deny
    ALL:ALL







--
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.